Only when PingTimeout parameter is set in conf file of Log File Agent, the event cannot be sent to EIF probe.
The event is written to cache file of Log File Agent, but the event is not sent to EIF probe though ping command is successful from the system of Log File Agent to the system of EIF probe in command line.
When PingTimeout parameter is set for Log File Agent, the agent tries to get ICMP protocol information with getprotobyname function.
If ICMP entry is not in \windows\system32\drivers\etc\protocol (in case of Unix, /etc/protocol), Log File Agent fails to get ICMP information and does not try to connect to EIF probe.
Diagnosing the problem
Set the following trace in Log File Agent.
When the issue occurs, the following message is logged.
(5110B534.00AF-1C7C:eipc.c,1726,"ed_ping") Error - icmp unknown protocol
Resolving the problem
Please add ICMP entry in \windows\system32\drivers\etc\protocol.